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Reply to Office Action of March 2, 2005 

REMARKS/ARGUMENTS 

Claims 8-27 are pending in the present application. In the Office Action mailed March 2, 
2005, the Examiner rejected claims 14-15 under 35 U.S.C. § 112. The Examiner also rejected claims 
8-27 under 35 U.S.C. § 103(a). 

Reconsideration is respectfully requested in view of the above amendments to the claims and 
the following remarks. 

I. Claims 14-15 Rejected Under 35 U.S.C. § 112, 1 st Paragraph 

The Examiner rejected claims 14-15 under 35 U.S.C. § 112, 1 st Paragraph as failing to 
comply with the enablement requirement given that these claims recited the term "WinlNET." This 
rejection is respectfully traversed. As a result of this paper, all recitation of the term "WinlNET" has 
been removed from claims 14 and 15. Accordingly, withdrawal of this rejection is respectfully 
requested. 

H. Claims 14-15 Rejected Under 35 U.S.C. § 1 12, 2 nd Paragraph 

The Examiner rejected claims 14-15 under 35 U.S.C. § 112, 2 nd Paragraph as being 
indefinite. Again, the specific concern raised by the Examiner relates to the use of the 
trademark/trade name "WinlNET" in the claims. This rejection is respectfully traversed. As noted 
above, the present paper has removed all reference to the term "WinlNET" in the claims. 
Accordingly, withdrawal of this rejection 

m. Rejection of Claims 8-12, 16-22 and 24-27 Under 35 U.S.C. S 103(a) 

The Examiner rejected claims 8-12, 16-22 and 24-27 under 35 U.S.C. § 103(a) based on U.S. 

Patent No. 5,657,390 to Elgamal et al. (hereinafter "Elgamal") in view of "Single Sign-On Using 

Cookies for Web Applications" by Samar (hereinafter "Samar"). This rejection is respectfully 

traversed. 

The M.P.E.P. states that 
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To establish a prima facie case of obviousness, three basic criteria must 
be met. First, there must be some suggestion or motivation, either in the 
references themselves or in the knowledge generally available to one of 
ordinary skill in the art, to modify the reference or to combine reference 
teachings. Second, there must be a reasonable expectation of success. Finally, 
the prior art reference (or references when combined) must teach or suggest 
all the claim limitations. The teaching or suggestion to make the claimed 
combination and the reasonable expectation of success must both be found in 
the prior art, and not based on applicant's disclosure. 

The initial burden is on the examiner to provide some suggestion of the 
desirability of doing what the inventor has done. To support the conclusion 
that the claimed invention is directed to obvious subject matter, either the 
references must expressly or impliedly suggest the claimed invention or the 
examiner must present a convincing line of reasoning as to why the artisan 
would have found the claimed invention to have been obvious in light of the 
teachings of the references. 

M.P.E.P. § 2142. 

As a result of the present paper, claims 8-12, 16-22 and 24-27 all recite that the limitation 
that the challenge is generated by a security extension in a server and is then sent to a client. Support 
for this limitation is found throughout Applicants' specification including, for example, page 8, lines 
10-15, page 15, lines 4-6, and page 11, lines 4-6. Such a limitation is not taught or suggested by the 
cited references. Specifically, Samar fails to teach anything related to a challenge that is generated 
by a server extension and is then sent to a client. Likewise, to the extent that Elgamal teaches the 
performance of a challenge, such a challenge is generated by the client and not by the server 
extension in the server. See e.g., Elgamal Col. 7, lines 13-15 ("[t]he client sends to the server, 
through the sockets connection a client-hello message which includes the following information: 
challenge data and cipher_specs."); see also Elgamal, Col. 7, line 4-Col. 8, line 20. 

Accordingly, because Elgamal and Samar do not teach a system in which the challenge is 
generated by a server extension and is then sent to the client, as is expressly required by claims 8-12, 
16-22 and 24-27, this combination of references does not render the present claims obvious under 35 
U.S.C. § 103(a). Withdrawal of this rejection is respectfully requested. 
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IV. Rejection of Claim 13 Under 35 U.S.C § 103(a) 

The Examiner rejected claim 13 under 35 U.S.C. § 103(a) based on Elgamal in view of 
Samar in further view of Applied Cryptography, Second Edition by Schneier (hereinafter 
"Schneier"). This rejection is respectfully traversed. 

As noted above, claim 1 3 will not be obvious in light of the cited references unless all of the 
claimed limitation are found in the prior art. See MPEP § 2143. Like the previously discussed 
claims, claim 13 includes the limitation that the challenge is generated by a security extension in a 
server and is then sent to a client. As outlined above, this limitation is not taught or suggested by 
Elgamal or Samar. Likewise, Applicants can find no disclosure in Schneier that relates to this 
limitation. Thus, because the cited combination of references does not teach or suggest all of the 
limitations found in claim 13, these references cannot be used to reject claim 13 under § 103(a). 
Withdrawal of this rejection is respectfully requested. 

V. Rejection of Claim 23 Under 35 U.S.C. § 103(a) 

The Examiner rejected claim 23 under 35 U.S.C. § 103(a) based on Elgamal in view of 
Samar and in further view of Handbook of Applied Cryptography by Menezes et al. (hereinafter 
"Menezes"). This rejection is respectfully traversed. 

Once again, claim 23 will not be obvious in light of the cited references unless all of the 
claimed limitation are found in the prior art. See MPEP § 2143. Like the previously discussed 
claims, claim 23 includes the limitation that the challenge is generated by a security extension in a 
server and is then sent to a client. As outlined above, this limitation is not taught or suggested by 
Elgamal or Samar. Likewise, the disclosure in Menezes does not compensate for the deficiencies of 
Samar or Elgamal. Accordingly, because the cited combination of references does not teach or 
suggest all of the limitations found in claim 23, these -references cannot be used to reject claim 23 
under § 103(a). Withdrawal of this rejection is respectfully requested. 
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VI. Rejection of Claims 14 and 15 Under 35 U.S.C. § 103(a) 

The Examiner rejected claim 14 under 35 U.S.C. § 103(a) based on Schneier in view of Late 
Night ActiveX by Eric Tall (hereinafter, "Tall"). The Examiner also rejected claim 15 under § 
103(a) based upon the combined teachings of Schneier, Tall, U.S. Patent No. 6,199,1 13 to Alegre et 
al. (hereinafter "Alegre") and in further view of "HTTP State Management Mechanism" by Kristol et 
al. (hereinafter "Kristol"). These rejections are respectfully traversed. 

Again, claims 14 and 15 can be rejected under § 103(a) if all of the limitations found in these 
claims are also suggested by the cited prior art references. See e.g., MPEP § 2143. As a result of 
this paper, claims 14 and 1 5 recite the steps of "determining the identity of a client" and "generating 
a key, wherein the key is a symmetric key generated by a security filter." Support for such 
limitations is found throughout Applicants' specification including, for example, Figure 4 and page 
9, line 19-page 10, line 7. 

Applicants cannot find any disclosure of these limitations in the cited references. 
Specifically, Applicants submit that neither Schneier nor Tall expressly teach a system in which the 
key used is a symmetric key or do they teach that this key is generated by a security filter. Alegre 
and Kristol likewise fail to suggest such claim elements. Accordingly, because all of the claim 
limitations are not taught or suggested by the prior art references, this combination of references does 
not render the present claims prima facie obvious under § 103(a). 
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VII. Conclusion 

Applicants respectfully assert that all pending claims are patentably distinct from the cited 
references, and request that a timely Notice of Allowance be issued in this case. If there are any 
remaining issues preventing allowance of the pending claims that maybe clarified by telephone, the 
Examiner is requested to call the undersigned. 



Date: June L 2005 

MADSON & METCALF 
Gateway Tower West 
15 West South Temple, Suite 900 
Salt Lake City, Utah 84101 
Telephone: 801/537-1700 



Respectfully submitted, 




Reg. No. 42,273 
Attorney for Applicant 
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